Automox records

7 published records for vendor Automox.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 28.6%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
31Monitor	CVE-2021-43326Proof of concept	Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.automox · automox · CWE-276	High7.8	1.2%Dec 15, 2021
31Monitor	CVE-2021-43325No exploit	Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory.automox · automox · CWE-276	High7.8	0.2%Dec 15, 2021
31Monitor	CVE-2022-36122No exploit	The Automox Agent before 40 on Windows incorrectly sets permissions on key files.automox · automox · CWE-732	High7.8	0.1%Oct 21, 2022
28Monitor	CVE-2022-27904No exploit	Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent instautomox · automox · CWE-367 Race condition	High7.0	0.1%Jun 30, 2022
22Monitor	CVE-2022-24308No exploit	Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive inforautomox · automox Local privilege escalation	Medium5.5	0.2%Apr 13, 2022
21Monitor	CVE-2021-26909No exploit	Automox Agent Guessable S3 Bucket Endpointautomox · automox · CWE-284 Pre-auth Broken access control (IDOR)	Medium5.3	0.7%Apr 23, 2021
13Monitor	CVE-2021-26908No exploit	Automox Agent Sensitive Log Information Disclosureautomox · automox · CWE-532 Info leak	Low3.3	0.2%Apr 23, 2021

CVE-2021-43326
31Monitor
Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.
HighCVSS 7.8Proof of conceptEPSS 1%
automox · automoxDec 15, 2021
CVE-2021-43325
31Monitor
Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory.
HighCVSS 7.8No exploitEPSS 0%
automox · automoxDec 15, 2021
CVE-2022-36122
31Monitor
The Automox Agent before 40 on Windows incorrectly sets permissions on key files.
HighCVSS 7.8No exploitEPSS 0%
automox · automoxOct 21, 2022
CVE-2022-27904
28Monitor
Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use (TOCTOU) race-condition attack during the agent inst
HighCVSS 7.0No exploitEPSS 0%
- Race condition
automox · automoxJun 30, 2022
CVE-2022-24308
22Monitor
Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive infor
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
automox · automoxApr 13, 2022
CVE-2021-26909
21Monitor
Automox Agent Guessable S3 Bucket Endpoint
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
automox · automoxApr 23, 2021
CVE-2021-26908
13Monitor
Automox Agent Sensitive Log Information Disclosure
LowCVSS 3.3No exploitEPSS 0%
- Info leak
automox · automoxApr 23, 2021